Enum ChronixAction 

pub enum ChronixAction {
    Read,
    Write,
    Delete,
    ManageKeys,
    ManageBackups,
    ManageConfig,
    ManageModels,
    ManageNamespaces,
    ManageNodes,
    ManageRegions,
    ManageCluster,
    ViewCluster,
}

An action chronixd asks about.

Every variant is issued by a request path, and every action in the schema is a variant here — the two lists are checked against each other by the_schema_describes_exactly_the_actions_we_issue. An action nothing issues is a policy clause that silently never fires, which is the whole failure mode this enum exists to avoid.

Admin is not here on purpose. It is an action group in the schema: the granular administrative actions are members of it, so action in Chronix::Action::"Admin" grants all of them while action == Chronix::Action::"ManageBackups" grants one. Nothing requests the group, so nothing can be granted by naming it as an equality.

Variants

Read

Read data from a namespace (GET, HEAD, OPTIONS, and every query RPC).

Write

Write data to a namespace, or change something in it.

Delete

Delete data from a namespace.

ManageKeys

Create, list and revoke API keys.

ManageBackups

Take, verify and restore backups.

ManageConfig

Change runtime configuration, such as the log level.

ManageModels

List, inspect, delete and retrain analytics models.

ManageNamespaces

Create, delete and inspect namespaces.

ManageNodes

Register, deregister and decommission cluster nodes.

ManageRegions

Create regions and drive their state transitions.

ManageCluster

Trigger cluster rebalancing.

ViewCluster

Read cluster topology, routing and health.

Implementations

impl ChronixAction

pub const ALL: &'static [Self]

Every action, in schema order. The inventory the schema is checked against.

pub const fn name(self) -> &'static str

The Cedar action name, which is also its Display.

pub fn to_entity_uid(self) -> EntityUid

Convert to the Cedar action entity UID.

pub const fn is_administrative(self) -> bool

Whether this action’s resource is the server rather than a namespace.

The split is the schema’s: an administrative action appliesTo System, a data action appliesTo Namespace. Asking the wrong one is a validation error at policy-load time rather than a decision that silently never matches.

Trait Implementations

impl Clone for ChronixAction

fn clone(&self) -> ChronixAction

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ChronixAction

impl Debug for ChronixAction

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ChronixAction

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for ChronixAction

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ChronixAction

impl Hash for ChronixAction

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for ChronixAction

fn cmp(&self, other: &ChronixAction) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for ChronixAction

fn eq(&self, other: &ChronixAction) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for ChronixAction

fn partial_cmp(&self, other: &ChronixAction) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for ChronixAction

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ChronixAction